Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
File:                     qlTEdj6gGMPccCA9BO_nH9SxsGY.mft (raw, json)
Hash identifier:          MX+TKFv4rmrwXB6R7MzCk7YdF32myFGuHleuQEsSsQ0=
Subject key identifier:   46:AB:48:47:7C:AC:33:02:59:3E:CF:CF:13:5A:5A:8E:A3:0D:07:9C
Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
Certificate issuer:       /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Certificate serial:       019E1D595AB10B0593D979BD5F32FA8198BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
Manifest number:          15E5
Signing time:             Tue 12 May 2026 18:00:55 +0000
Manifest this update:     Tue 12 May 2026 18:00:55 +0000
Manifest next update:     Wed 13 May 2026 18:00:55 +0000
Files and hashes:         1: bZqOUIU_1IqMOnS3XXUrS60GrpM.roa (hash: LFmDzSYfJ7mk0ygK5bmtim3i/wVzAaEknmN17hltFu0=)
                          2: qlTEdj6gGMPccCA9BO_nH9SxsGY.crl (hash: +YL4KMOiSdlUSYVYl28i+9a/9AKt+5I3PYwzOlETy1k=)
                          3: qxRVneBb_uUd_NsM3Vb645rM-7A.roa (hash: G6Y/r+hYk+mMByjpNJdV1U1ctvTf0yt3EQ8Sq5betwQ=)
                          4: sPMgSkKer_29geM5-1T1-keLLGw.roa (hash: 4QbBQJWJYkQw7XP4lLebE7Woxf8+43i+sSWLrzO/9j0=)
                          5: tP-zd4fvUG5Ghj_hj4jy-iA0H5M.roa (hash: dncyiHvUZh8Otlmg0Vs+Wpy7Azdi/J7dNn/2EsRGlWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:5a:b1:0b:05:93:d9:79:bd:5f:32:fa:81:98:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
        Validity
            Not Before: May 12 18:00:55 2026 GMT
            Not After : May 13 18:00:55 2026 GMT
        Subject: CN=46ab48477cac3302593ecfcf135a5a8ea30d079c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f8:a4:43:2a:a4:b6:b7:fd:66:98:ea:9a:b1:
                    2e:5a:b3:79:68:ed:3f:60:3d:e1:9f:e5:28:f9:fb:
                    db:1f:de:ac:61:13:98:30:00:23:0c:d5:6e:4a:08:
                    df:10:4c:d1:df:4a:83:e0:8b:05:8a:39:fa:97:12:
                    7a:62:df:27:ab:ff:d0:94:5f:7d:7b:53:05:d9:d6:
                    41:76:40:15:e3:21:71:06:30:66:39:c1:d1:db:5b:
                    c5:02:62:c4:4e:00:5f:ae:8f:25:2e:0d:50:fb:38:
                    cc:36:45:4a:16:fe:be:2b:5b:7b:55:53:a5:cd:73:
                    02:e2:e5:f3:ff:ae:8b:d6:20:e7:da:0a:5e:f2:9c:
                    5f:6c:4f:9e:16:c2:30:90:67:af:83:36:44:71:de:
                    6e:03:9d:9d:6c:36:35:43:1f:1e:4d:cb:5e:79:a0:
                    d7:d9:78:ba:60:49:24:41:9b:a6:51:50:24:20:e3:
                    8b:25:25:2e:c7:5d:01:f5:32:4e:70:1b:c3:c7:17:
                    8c:24:08:b1:39:7b:2e:c6:37:2c:60:b2:b0:b1:70:
                    e8:bd:d6:b6:bf:f6:e6:1e:57:f6:fa:46:ea:4f:0a:
                    41:2c:d9:ca:48:53:3c:e2:bb:98:53:75:c1:5c:7c:
                    6b:c9:dd:20:92:91:12:66:f1:ae:58:1d:a8:ba:c7:
                    8d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AB:48:47:7C:AC:33:02:59:3E:CF:CF:13:5A:5A:8E:A3:0D:07:9C
            X509v3 Authority Key Identifier:
                keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:d0:f4:56:72:2e:4e:85:a2:49:33:3c:89:e0:7a:c7:05:bf:
         f1:87:ea:95:3a:ed:9c:6a:b2:fd:91:a8:44:cd:fc:82:99:a5:
         d3:5f:18:7c:72:82:ae:d7:97:f4:13:5d:98:81:0f:fd:84:a4:
         7f:c0:ef:f9:13:23:0a:1f:05:9f:e0:de:50:25:14:03:4a:13:
         17:ae:d4:d2:27:15:1c:25:22:6c:58:ca:79:a0:b5:73:4f:40:
         c4:be:ab:de:dc:7a:d3:3c:f3:2e:da:ff:30:8c:ed:2b:78:52:
         04:60:77:18:60:af:e4:4e:ad:48:5e:27:0d:4c:ca:37:a5:0d:
         36:1f:5b:35:c2:82:40:5f:b2:b2:e1:40:48:9c:19:81:b0:da:
         25:40:3e:30:18:83:e2:f6:a6:7f:e5:43:51:2e:db:00:2a:4d:
         59:aa:36:ba:fa:e6:ee:f6:66:ae:e0:7e:81:ff:9c:61:48:47:
         52:4b:ea:7e:ab:b6:00:df:25:94:44:78:4d:e1:1e:d8:b5:32:
         42:82:07:c5:a6:89:b4:85:f6:7a:e3:af:ab:ca:58:2d:81:86:
         4c:da:44:63:45:5c:04:f4:93:b4:4e:f6:79:91:b7:16:ec:45:
         9c:77:29:8d:c1:c5:61:a1:ea:9b:f2:ff:64:89:aa:86:68:47:
         c1:ee:33:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:34:29 2026 by rpki-client